Answer in brief
CVE-2022-50497 records a High severity (CVSS 7.1) vulnerability in binfmt_misc: fix shift-out-of-bounds in check_special_flags. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.1. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <0f1a48994b3e516d5c7fd5d12204fdba7a604771 || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <ea6145370be8016755c43aca799815fc4b8c88b1 || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <97382a2639b1cd9631f6069061e9d7062cd2b098 || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <419b808504c26b3e3342365f34ccd0843e09a7f8 || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <dcbc51d31d0afbd45e830e3cf565a7b3ca7bf0d8 || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <88cea1676a09f7c45a1438153a126610c33b1590 || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <a651bb5ff997b9f02662bcdef3d8b4e6f0d79656 || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <a91123d4bda463469f68f0427adabf8108001f94 || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <6a46bf558803dd2b959ca7435a5c143efe837217 | 0f1a48994b3e516d5c7fd5d12204fdba7a604771, ea6145370be8016755c43aca799815fc4b8c88b1, 97382a2639b1cd9631f6069061e9d7062cd2b098, 419b808504c26b3e3342365f34ccd0843e09a7f8, dcbc51d31d0afbd45e830e3cf565a7b3ca7bf0d8, 88cea1676a09f7c45a1438153a126610c33b1590, a651bb5ff997b9f02662bcdef3d8b4e6f0d79656, a91123d4bda463469f68f0427adabf8108001f94, 6a46bf558803dd2b959ca7435a5c143efe837217 |
| Linux/Linuxgeneric | 2.6.12 | Not reported |
Published upstream
Oct 4, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Nov 5, 2026
In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: fix shift-out-of-bounds in check_special_flags UBSAN reported a shift-out-of-bounds warning: left shift of 1 by 31 places cannot be represented in type 'int' Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8d/0xcf lib/dump_stack.c:106 ubsan_epilogue+0xa/0x44 lib/ubsan.c:151 __ubsan_handle_shift_out_of_bounds+0x1e7/0x208 lib/ubsan.c:322 check_special_flags fs/binfmt_misc.c:241 [inline] create_entry fs/binfmt_misc.c:456 [inline] bm_register_write+0x9d3/0xa20 fs/binfmt_misc.c:654 vfs_write+0x11e/0x580 fs/read_write.c:582 ksys_write+0xcf/0x120 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x34/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x4194e1 Since the type of Node's flags is unsigned long, we should define these macros with same type too.
Quoted source text, attributed separately from HOL analysis.